Server-Side Request Forgery in @peertube/embed-api

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-0508 · ADVISORY
• chocobozzz/peertube commit f33e515 · WEB
• chocobozzz/peertube · PACKAGE
• huntr.dev/bounties/c3724574-b6c9-430b-849b-40dd2b20f23c · WEB

Lỗ hổng khác của peertube

• CVE-2025-32949TRUNG BÌNH 6.5This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.…
• CVE-2025-32948CAO 7.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs …
• CVE-2025-32947CAO 7.5This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" en…
• CVE-2025-32946TRUNG BÌNH 5.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code se…
• CVE-2025-32945TRUNG BÌNH 4.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code se…